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(54) RADIO TRANSMISSION DEVICE AND SETTING METHOD FOR KEY 

(57)Abstract: 

PROBLEM TO BE SOLVED: To improve secrecy maintainability of key information by 
generating and storing a key and transferring the key to other radio transmission 
devices when a station is specified as a master station at the start of a key setting 
mode, and receiving and storing a key when specified as a slave station. 
SOLUTION: Radio transmission devices 20 to 22 are equipped with ports for LAN 
connection using a hub (HAB) of, for example, 100 BASE-TX. The LAN ports of the 
radio transmission device 20 to 22 are connected to a hub 25 through LAN cables. A 
radio transmission device (e.g. 20) specified as a master station among the radio 
transmission devices 20 to 22 generates random common key information with its 
internal program, stores the key in its station, and transfer common key information 
to the radio transmission devices 21 and 22 specified as other slave stations through 
the hub 25. The format of transfer of the key is previously specified and unique. A 
slave station stores the received key in itself and ends the process. 
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CLAIMS 



[Claim(s)] 

[Claim 1] In the radio-transmission equipment possessing a wireless data transceiver 
means, a key storage means to store a key in the storage means of a non-volatile, 
and an encryption means to perform a data encryption decryption using a key A key 
generation means, a key setting-out mode starting means, parents / child assignment 
means, and a cable data transceiver means, A key transfer means to transmit a key 
to other radio-transmission equipments using said cable data transceiver means, 
When key setting-out mode is started by key receiving means to receive a key using 
said cable data transceiver means, and said key setting-out mode starting means 
When specified as the key station by said parents / child assignment means While 
said key generation means generates a key and storing a key in the storage means of 
a non-volatile with said key storage means When a key is transmitted to other radio- 
transmission equipments with said key transfer means and it is specified as the child 
office by said parents / child assignment means Radio-transmission equipment 
characterized by having the key setting-out control means which receives a key with 
said key receiving means, and stores a key in the storage means of a non-volatile 
with said key storage means. 

[Claim 2] Said cable data transceiver means is radio-transmission equipment 
according to claim 1 characterized by being a LAN interface circuitry. 
[Claim 3] The 2nd process which sets other radio-transmission equipments except 
the 1st process which makes cable connection of two or more radio-transmission 
equipments which should set up a key, and one set made into a key station as a child 
office, starts key setting-out mode, and is changed into the waiting state waiting for 
receiving of a key. The setting-out approach of the key in radio-transmission 
equipment including the 3rd process transmitted to a child office through said cable 
connection while setting the radio-transmission equipment made into a key station as 
a key station, starting key setting-out mode, generating a key and storing a key in a 



local station. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] Especially this invention relates to the setting-out approach 
of the cryptographic key in the radio-transmission equipment used in the wireless 
LAN in a building, the data transmission between buildings, etc. about radio- 
transmission equipment. 
[0002] 

[Description of the Prior Art] Conventionally, when a transmission data encryption 
was performed in the radio-transmission equipment of the data used in the wireless 
LAN in a building, the data transmission between buildings, etc., the common key data 
of the secrecy used for encryption needed to be set as each radio-transmission 
equipment. Drawing 5 is the block diagram showing the common key setting-out 
approach in conventional radio-transmission equipment. For example, when a common 
key was set as radio-transmission equipment 10, the common key information which 
radio-transmission equipment 10 connected the terminal 13 to LAN connected, for 
example, the user determined was transmitted to radio-transmission equipment 10 
from this terminal 13. In order to set a key as two or more radio-transmission 
equipments 10-12, the terminal 13 was connected to LAN to which each radio- 
transmission equipment is connected, and setting-out actuation of a key was 
performed, respectively. 
[0003] 

[Problem(s) to be Solved by the Invention] In conventional radio-transmission 
equipment which was described above Since setting out of a key is possible from the 
usual terminal and it reset up any number of times For example, there was a trouble 
that a communication link will be able to be intercepted, without accessing partner 
equipment in any way, when radio-transmission equipment 1 1 and radio-transmission 
equipment 12 were performing the encryption communication link and the same 
common key as near radio-transmission equipment 10 was set up. Moreover, even 
when a key was unknown, there was also a trouble that there was a possibility that a 
key may be decoded, by repeating key data in order and setting them up. The object 
of this invention solves the trouble of the above conventional techniques, and is to 
offer the radio-transmission equipment whose security-protection nature of key 
information improves. 
[0004] 



[Means for Solving the Problem] In the radio-transmission equipment with which this 
invention possesses a wireless data transceiver means, a key storage means to store 
a key in the storage means of a non-volatile, and an encryption means to perform a 
data encryption decryption using a key A key generation means, a key setting-out 
mode starting means, parents / child assignment means, and a cable data transceiver 
means, A key transfer means to transmit a key to other radio-transmission 
equipments using said cable data transceiver means, When key setting-out mode is 
started by key receiving means to receive a key using said cable data transceiver 
means, and said key setting-out mode starting means When specified as the key 
station by said parents / child assignment means While said key generation means 
generates a key and storing a key in the storage means of a non-volatile with said key 
storage means When a key is transmitted to other radio-transmission equipments 
with said key transfer means and it is specified as the child office by said parents / 
child assignment means, said key receiving means receives a key and it is 
characterized by having the key setting-out control means which stores a key in the 
storage means of a non-volatile with said key storage means. 

[0005] Since according to this invention it is necessary to make cable connection of 
the equipment which should be set up by LAN etc. to set up a common key, it 
becomes difficult for those who are going to intercept after installing in a station etc. 
to perform common key setting-out processing. Moreover, since the radio- 
transmission equipment specified as the key station generates the common key 
information set up automatically and it transmits to a child office, even the contractor 
who sets a system, for example cannot know key information, but confidentiality 
improves. Since common key setting-out processing is redone in all radio- 
transmission equipments and new key information is set up when extending a child 
office, it is also difficult for a user to try decode of a key, and a possibility that a key 
may be decoded decreases. 
[0006] 

[Embodiment of the Invention] Hereafter, the gestalt of operation of this invention is 
explained to a detail. Drawing 1 is the block diagram showing the configuration of the 
communication system containing the radio-transmission equipment which applied 
this invention. In the example of drawing 1 , three radio-transmission equipments 20- 
22 are connected by the radio-transmission way. Each radio-transmission equipments 
20-22 are connected to LAN, respectively, and two or more terminals and servers 
which are not illustrated are connected to each LAN. In order to encipher to each 
radio-transmission equipments 20-22, the common key information 23 which is 64-bit 
random data is stored, and each radio-transmission equipments 20-22 encipher 
transmission information using this key information, and decrypt the received 
encryption data. 

[0007] Drawing 2 is the block diagram showing the system configuration for 
performing common key setting-out processing of this invention. Although it is 



suitable for common key setting-out processing of this invention to bring together 
each radio-transmission equipments 20-22 in one place, and to carry them out before 
the contractor who builds a system installs each radio-transmission equipment in a 
service space, it is also possible to carry out, after arranging to an installation. Each 
radio-transmission equipments 20-22 are beforehand equipped with the port for LAN 
connection which uses hubs (HAB), such as 100BASE-TX. This LAN port is used in 
common key setting-out processing of this example. The LAN port of each radio- 
transmission equipments 20-22 is connected to a hub 25 with a LAN cable. And the 
radio-transmission equipment (for example, 20) specified as the key station of each 
radio-transmission equipments 20-22 transmits common key information to the radio- 
transmission equipments 21 and 22 specified as other child offices through the hub 25 
while it generates random common key information and stores it in a local station by 
the internal program. The format which transmits a key is the unique thing specified 
beforehand. The key received in the child office is stored in a local station, and 
processing is ended. 

[0008] Drawing 3 is the block diagram showing the configuration of the radio- 
transmission equipment of this invention. Radio-transmission equipment is connected 
with two or more terminals which are not illustrated through LAN of for example, a 
bus mold. The LAN interface circuitry 37 has the interface function of a signal with 
well-known bus formed LAN, receives the LAN packet addressed to other LANs 
based on control of CPU33, and stores it in the transmission buffer in RAM35. 
Moreover, it receives/decodes and the LAN packet addressed to self-LAN 
accumulated in the receive buffer in RAM35 is transmitted to LAN. 
[0009] CPU33 controls the whole radio-transmission equipment based on the program 
stored in ROM34. That is, it enciphers based on common key information, it encodes 
to transmission, and the LAN packet in a transmission buffer is outputted through an 
interface circuitry 32. Moreover, a modulation code is decrypted for received data, a 
code is decrypted further, a LAN packet is reproduced, and it stores in the receive 
buffer in RAM35. When an error is detected by received data, CPU33 transmits a 
resending demand packet to partner equipment, and the partner equipment which 
received the resending demand packet resends the saved transmitting packet. A part 
of ROM [ at least ]34 is an electric target like a flash memory with the configuration 
which can be eliminated and written in, common key information is written in this part, 
and it is saved into it. 

[0010] The transceiver circuit 31 builds in a sending circuit and a receiving circuit, 
and a sending circuit modulates a carrier based on the inputted data, and it changes, 
amplifies and outputs it to a predetermined frequency band. QAM etc. is arbitration 
and the modulation technique of a band is arbitrary. Moreover, a spectrum diffusion 
method may be adopted. A sending signal is transmitted from an antenna 30. The 
receiving circuit of the transceiver circuits 26-29 restores to it, decodes and outputs 
the signal received from the antenna 30. In addition, although it connects through the 



attenuator, transmitted power is about several mW, and if transmission and the half- 
duplex which performs reception by turns are performed, a problem will not have a 
sending circuit and a receiving circuit. 

[001 1] The panel circuit 36 is an easy panel circuit for I/O which consists of for 
example, a DIP switch and a light emitting diode, the condition of a DIP switch is read 
by for example, the periodic target by CPU33, and the condition of equipment is 
displayed on a light emitting diode. It is used in order for one of DIP switches to start 
the common key setting-out mode of radio-transmission equipment, and other one is 
used in order to specify whether radio-transmission equipment is operated as a key 
station, or it is made to operate as a child office. 

[0012] Drawing 4 is a flow chart which shows the content of common key setting-out 
processing of the radio-transmission equipment of this invention. This processing is 
periodically started by the timer. In S10, it is judged whether the DIP switch for 
starting the above mentioned common key setting-out mode is ON, and when a 
judgment result is affirmation, it shifts to S1 1. Although it is judged whether setting 
out of the DIP switch used in order to specify whether radio-transmission equipment 
is operated as a key station in S1 1 or it is made to operate as a child office is a key 
station, and it shifts to S12 when a judgment result is affirmation, in negation it shifts 
S15. 

[0013] When setting out is a key station, in S12, 64-bit random common key 
information is generated, using the program of the common knowledge which 
generates a value random whenever it starts, for example. In S13, it writes in and 
saves at the non-volatile ROM which described the generated key information above 
and which can be written in electric. In S14, the generated key information is 
transmitted from a LAN port in a unique predetermined format. 

[0014] When setting out is a child office, in S15, it writes in and saves in waiting and 
S16 at the non-volatile ROM which described the received key information above and 
which can be written in until the LAN packet of the unique format in which key 
information was stored from the LAN port is received. Waiting and processing are 
ended until the DIP switch for starting the common key setting-out mode described 
above in S17 becomes off. 

[0015] Next, the setting-out approach of a common key is explained with reference to 
drawing 2 . first, the radio-transmission equipments 20-22 which should set up a 
common key — all LAN ports are connected to a hub 25. Next, the DIP switch for 
specifying whether the radio-transmission equipment in the panel circuit 36 is 
operated as a key station or it is made to operate as a child office only about one of 
the radio-transmission equipments 20-22 is set as a "key station." And this DIP 
switch of the other radio-transmission equipments 21 and 22 is set as a "child 
office." 

[0016] Next, the DIP switch for starting the common key setting-out mode of the 
radio-transmission equipments 21 and 22 set as the "child office" is turned ON. Now, 



the radio-transmission equipment of a "child office" will be in the standby condition 
of S15 of drawing 4 . The DIP switch for finally starting the common key setting-out 
mode of the radio-transmission equipment 20 set as the "key station" is turned ON. 
By this actuation, the radio-transmission equipment 20 of a "key station" performs 
processing of drawing 4 of S12-14, it transmits it to a child office while it generates 
and saves a common key, and it receives and stores key information in a child office. 
[0017] By above configurations and actuation, the common key information on 
secrecy can be set as all radio-transmission equipments, without being indicated by 
not only a user but a manager and a maintenance man. In addition, in the common key 
setting-out approach of this invention, unless it starts common key setting-out mode 
in no radio-transmission equipments, a common key cannot be set up. If access to 
said DIP switch is forbidden by managing locking etc. only to the radio-transmission 
equipment which followed, for example, was set as the key station, even if it does not 
cope with it especially about the radio-transmission equipment of a child office, it is 
possible to prevent modification of a key. 

[0018] As mentioned above, the following modifications are also considered by this 
invention although the example of this invention was indicated. In an example, 
although the example which sets up a common key using the LAN port used for a 
communication link was indicated, cable connection ports, such as dedication, for 
example, RS-232C etc., may be established in setting-out processing of a common 
key. In this case, a LAN port may be unnecessary if radio-transmission equipment has 
terminal capabilities. Moreover, since radio-transmission equipment possesses the 
radio link, it may use this radio link for common key setting-out processing. 
[0019] Since unjust setting out can be prevented if only a key station is managed as 
described above, a key station may be equipped with the common key copy function 
which performs only S14 of drawing 4 , for example. In this case, the radio- 
transmission equipment of a child office and the radio-transmission equipment of a 
key station which are extended, for example are connected in a hub, the common key 
setting-out mode of a child office is started, and the common key copy processing 
described above in the key station is started. Then, a common key is transmitted to a 
child office from a key station, and a common key is stored in a child office. By the 
above processing, when extending radio-transmission equipment, the need of 
connecting all radio-transmission equipments in a hub is lost. 

[0020] In addition, when the above copy functions are prepared, the DIP switch of a 
child office is changed, it considers as a key station, and reading a common key using 
a copy function is also considered. It follows, for example, the present parents / child 
setting-out information are also stored in the storage area of a common key, and 
when setting out is changed into a key station from a child office, the measures of 
eliminating the common key stored are taken. 
[0021] 

[Effect of the Invention] As stated above, when key setting-out mode is started by 



the key setting-out mode starting means in radio-transmission equipment in this 
invention When specified as the key station by parents / child assignment means 
While a key generation means generates a key automatically and storing a key in the 
storage means of a non-volatile with a key storage means When a key is transmitted 
to other radio-transmission equipments and it is specified as the child office by the 
key transfer means Since it constituted so that a key receiving means might receive a 
key and a key might be stored in the storage means of a non-volatile with a key 
storage means, the key information to which even the contractor who sets a system, 
for example is set cannot be known, but it is effective in confidentiality improving. 
[0022] Moreover, since according to this invention it is necessary to make cable 
connection of the radio-transmission equipment which should be set up by LAN etc. 
to set up a common key, it is effective in it becoming difficult for those who are going 
to intercept after installing in a station etc. to perform common key setting-out 
processing. Furthermore, since common key setting-out processing is redone in all 
radio-transmission equipments and new key information is set up when extending a 
child office, it is also effective in it being difficult and a possibility that a key may be 
decoded decreasing that a user tries decode of a key. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is the block diagram showing the configuration of the communication 
system containing the radio-transmission equipment which applied this invention. 
[Drawing 2] It is the block diagram showing the system configuration for performing 
common key setting-out processing of this invention. 

[Drawing 3] It is the block diagram showing the configuration of the radio- 
transmission equipment of this invention. 

[Drawing 4] It is the flow chart which shows the content of common key setting-out 

processing of the radio-transmission equipment of this invention. 

[Drawing 5] It is the block diagram showing the common key setting-out approach in 

conventional radio-transmission equipment. 

[Description of Notations] 

10, 1 1, 12 [ — Common key information 25 / — A hub, 30 / — An antenna, 31 / — A 
transceiver circuit 32 / — An interface circuitry, 33 / — CPU 34 / — ROM 35 / — 
RAM 36 / — A panel circuit 37 / — LAN interface circuitry ] — Radio-transmission 
equipment, 13 — A terminal, 20, 21, 22 — Radio-transmission equipment, 23 
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TosaaeassBt::, ^so^&srss^wa"* 

(*» £T©a«iffiissB(cfcL>T#ai«Bj£t- h**e 
■button itiMiflDKjeiMTitftis se^r. «?iar 

[0 0 18] J.X±. *«W©*Sfi«y*MSLfctf. 
0«*tfRS-232Cair©*||»tt#-h«WtTt»J: 

t\ com. MMfiasikwfii3tEtitt*«LTtvh. 
[ooi9] HuSBLfcfc-pK, nao»«nrw 

&SUB0mea££B&*/\7TttNftU ?JSflD«3fflB 
last- K*fi»LTfel»T, aUBtCfcl^TmiSLfctt 



[0 0 2 0] *fe\ ±B<DJ:3*3t:-«IB«Wt/t» 

*te*«fflLTJd«£w*ffi-r;i£ j fc i *?is*i*. fie 

^>T\ fliJAl#^tiiSt«)ttttxy7 , lcaaE©IB/?iasit 

[0 0 2 1] 

*«M32H£Blc*5i,<»T, «H£t-Kfi»#Slc«fe"3T 
MBS*- Ktfa»*tifc*i*tc, «/?»ft#«lcJ: 

f&®!RIR£i£&Btc1i££U TBlcflBtStiTt**** 
fcl*. St§fI#&K«fc^T8l*§flU 8iBlS#aiCcfc 

[0022] $f c , **wtc«ttitf, ftiiaras^-rs 
a^icttKjer^* «itte2£«B* l a n miz <t tit 
*<dt. mwficrb i>imtcmx 
L^?i r «*# j&MKjgn&eittTr * c t 

a^a:irictt^T©«ttteiS6SBtcfcc^TJtaaHfts«i 

[0 2] *R^J6IW8£»3£*?r-r X 
[0 3] 4:»K0>ffitlB€S£KBO«fiE^r7D'y^B 
[04] ^SmoMIRfi^SOftSHHffigttSOAS 

[05] ««oMt^«B(c£(t«Ainns£«ac« 

10. IK 1 2-Miea»E 20, 

21, 2 2--«esii> 2 3-«aa««. 25- 

/\X 3 0-7>ft, 3 1 -£5ftiaHk 3 2 •••-<> 
*-7i<XEl», 3 3-CPU, 34 -ROM, 35 
-RAM. 3 6-/^W« 3 7-L ANO$-7 



(5) 



2000-341 262 




(6) 



&ffl 2000-341 262 



imtUB] ¥(S12^3^9B (2000. 3. 9) 

i^mmm i ] 



St::. BU§B^X?-^#|g^«fc vmmiz)%mZtiZ^2> 

n^tc Bu§B^a^<Di3ta#atc^TrtT.Ti^^^ 



P.I 

ftwtftmnm^ ^2003-10827 e 

CTWrMfT ±m i~± 9 3 7 1 5X00 

V fifes -fuf-pU 

cotHsiito^TW:* 18*11^13 amfmm&mmmz&m Ltc 



mkSUmio 00-34126 2^'£m^mznz£oizm*Q&ffi?&zfr 



fc"G£tt#fc«-=>T«:; 9 0B1XP*3) l-v JtfFJr^KttLT. mP\*m&TZ 



p. 2 



8 5 2 3 9 3 7 1 



^-v>(1) 



